Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa
File:                     01adba4e-fbea-3643-8408-e0198afca638.roa (raw, json)
Hash identifier:          ImBmWZqy/wRotbFi4Om7O1mZTvtr5ZKIgnGcaLc4L58=
Subject key identifier:   BD:66:FD:50:17:EF:2E:32:75:0D:FA:3B:3C:CD:B7:ED:D2:C3:10:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C77F2EC995FCD42E6C6080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        68.36.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:7f:2e:c9:95:fc:d4:2e:6c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a1081be4-b905-4c2d-9f09-614b43b83597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:69:e1:86:d1:40:6b:2a:df:83:ae:5c:ef:
                    eb:93:37:53:8c:d8:b1:51:8f:a5:84:95:3b:2c:22:
                    54:95:b0:12:62:69:0a:4a:f3:e6:45:e8:e8:5a:af:
                    3e:b7:7d:ec:dc:4d:2e:4b:3e:29:3a:45:ed:9d:2e:
                    6f:e0:57:c7:1f:a1:9e:56:40:ec:81:73:25:7b:54:
                    1e:08:3c:02:c5:60:1f:a0:ac:55:7f:ba:d1:6a:d7:
                    5c:5e:a2:96:9b:2f:d4:03:48:43:d3:6d:48:7c:28:
                    47:b0:10:cb:82:ec:36:41:7c:b1:3f:67:4a:9c:36:
                    94:e7:be:69:24:ca:08:1d:84:a1:0e:0e:f4:cd:fe:
                    eb:be:37:2a:71:7c:25:10:96:3c:8e:33:71:07:39:
                    83:85:4a:82:6f:81:d1:bb:64:34:3d:98:d3:33:cb:
                    71:ce:3d:a5:93:98:16:0a:a4:88:ae:34:cb:3a:33:
                    15:93:8b:28:08:ab:b5:f1:8a:80:70:53:5f:5a:2c:
                    39:bb:6b:a6:2c:a0:7a:c5:bc:14:e9:4d:90:9e:0d:
                    ca:57:5c:83:b9:eb:b1:a6:a2:4a:ff:0a:ea:f3:ca:
                    b0:09:8b:4c:94:80:c0:0e:94:6f:b4:ed:1e:89:be:
                    d5:ae:a4:86:4c:ea:24:8f:59:17:e8:e1:a6:9d:16:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:66:FD:50:17:EF:2E:32:75:0D:FA:3B:3C:CD:B7:ED:D2:C3:10:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:65:27:9f:08:9a:da:7f:33:0b:df:65:02:f5:e8:d5:9f:5d:
         8c:3e:22:84:33:e6:35:e3:57:5e:8a:96:d6:53:d7:61:7d:1e:
         94:5f:62:aa:ef:58:a1:7a:cf:59:15:7f:96:0a:bf:e4:19:c3:
         42:16:7b:88:63:f3:80:1d:ec:ed:a1:8e:13:7c:bc:ac:e7:26:
         37:19:f6:67:0d:ed:60:39:bc:20:fb:b7:14:7e:b1:08:80:e9:
         f6:ec:4e:87:55:13:a2:3c:af:a8:63:aa:57:21:83:89:04:65:
         3f:5b:e0:8f:c4:57:e4:0b:68:8f:cd:f8:74:0a:1c:5d:f9:e3:
         19:ef:b9:d9:24:1e:09:eb:7f:50:00:f5:ce:35:67:b6:3d:d5:
         aa:83:5e:50:22:50:1b:97:d9:cc:6f:ea:58:7c:6b:94:56:20:
         f4:3f:59:ed:ee:e9:08:db:1b:aa:ae:c4:91:d9:61:85:47:0e:
         89:a9:c7:90:6c:c3:c7:2d:a1:99:49:f6:20:54:ed:2b:a0:c3:
         79:6b:98:e6:68:17:83:a2:98:e3:d5:1e:80:80:00:49:cd:07:
         90:a5:60:57:13:c6:96:ec:73:49:0e:dd:25:83:1d:8a:f5:b9:
         92:25:eb:81:f3:48:02:5e:37:62:ea:64:64:1f:4a:45:0e:a8:
         8d:40:5a:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x38uyZX81C5sYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTEwODFiZTQtYjkwNS00YzJkLTlmMDktNjE0YjQzYjgzNTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvhp4YbRQGsq34OuXO/rkzdTjNixUY+lhJU7
LCJUlbASYmkKSvPmRejoWq8+t33s3E0uSz4pOkXtnS5v4FfHH6GeVkDsgXMle1Qe
CDwCxWAfoKxVf7rRatdcXqKWmy/UA0hD021IfChHsBDLguw2QXyxP2dKnDaU575p
JMoIHYShDg70zf7rvjcqcXwlEJY8jjNxBzmDhUqCb4HRu2Q0PZjTM8txzj2lk5gW
CqSIrjTLOjMVk4soCKu18YqAcFNfWiw5u2umLKB6xbwU6U2Qng3KV1yDueuxpqJK
/wrq88qwCYtMlIDADpRvtO0eib7VrqSGTOokj1kX6OGmnRY8ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1m/VAX7y4ydQ36OzzNt+3SwxBDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFhZGJhNGUtZmJlYS0z
NjQzLTg0MDgtZTAxOThhZmNhNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCRuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhlJ58Imtp/MwvfZQL16NWfXYw+IoQz5jXjV16KltZT12F9HpRfYqrv
WKF6z1kVf5YKv+QZw0IWe4hj84Ad7O2hjhN8vKznJjcZ9mcN7WA5vCD7txR+sQiA
6fbsTodVE6I8r6hjqlchg4kEZT9b4I/EV+QLaI/N+HQKHF354xnvudkkHgnrf1AA
9c41Z7Y91aqDXlAiUBuX2cxv6lh8a5RWIPQ/We3u6QjbG6quxJHZYYVHDompx5Bs
w8ctoZlJ9iBU7Sugw3lrmOZoF4OimOPVHoCAAEnNB5ClYFcTxpbsc0kO3SWDHYr1
uZIl64HzSAJeN2LqZGQfSkUOqI1AWhQ=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:40:54 2024 by rpki-client on console-fra.rpki-client.org